users authenticate and can upload photos [some bugs]